CVE-2013-5698: XSS
First published: Thu Sep 05 2013(Updated: )
Cross-site scripting (XSS) vulnerability in Open-Xchange AppSuite and Server before 6.22.0 rev16, 6.22.1 before rev19, 7.0.1 before rev7, 7.0.2 before rev11, and 7.2.0 before rev8 allows remote authenticated users to inject arbitrary web script or HTML via a delivery=view action, aka Bug ID 26373, a different vulnerability than CVE-2013-3106.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Open-Xchange App Suite Backend | =6.22.0 | |
| Open-Xchange App Suite Backend | =6.22.1 | |
| Open-Xchange App Suite Backend | =7.0.1 | |
| Open-Xchange App Suite Backend | =7.0.2 | |
| Open-Xchange App Suite Backend | =7.2.0 | |
| SUSE Linux Openexchange Server | =6.22.0 | |
| SUSE Linux Openexchange Server | =6.22.1 | |
| SUSE Linux Openexchange Server | =7.0.1 | |
| SUSE Linux Openexchange Server | =7.0.2 | |
| SUSE Linux Openexchange Server | =7.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2013-5698?
CVE-2013-5698 is classified as a medium severity cross-site scripting (XSS) vulnerability.
How do I fix CVE-2013-5698?
To fix CVE-2013-5698, upgrade to Open-Xchange AppSuite or Server version 6.22.0 rev16, 6.22.1 rev19, 7.0.1 rev7, 7.0.2 rev11, or 7.2.0 rev8 or later.
Who is affected by CVE-2013-5698?
CVE-2013-5698 affects remote authenticated users of Open-Xchange AppSuite and Server versions prior to the specified updates.
What kind of attacks can CVE-2013-5698 enable?
CVE-2013-5698 can enable remote authenticated users to inject arbitrary web scripts or HTML into the application.
Is CVE-2013-5698 exploitable without authentication?
No, CVE-2013-5698 requires the attacker to be an authenticated user to exploit the vulnerability.
- agent/type
- agent/author
- agent/references
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/open-xchange
- canonical/open-xchange app suite backend
- version/open-xchange app suite backend/6.22.0
- version/open-xchange app suite backend/6.22.1
- version/open-xchange app suite backend/7.0.1
- version/open-xchange app suite backend/7.0.2
- version/open-xchange app suite backend/7.2.0
- canonical/suse linux openexchange server
- version/suse linux openexchange server/6.22.0
- version/suse linux openexchange server/6.22.1
- version/suse linux openexchange server/7.0.1
- version/suse linux openexchange server/7.0.2
- version/suse linux openexchange server/7.2.0